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Proposed Amendments : 

Applicants propose to cancel claims 2, 6, 9, 12, 15 and 16, and change the dependency of claims 
13, 17, and 18. Applicants propose to amend claims 1 1 and 13 to correct typographical error and 
lack of antecedent basis. Applicants propose to amend independent claims 1, 7, 19 and 24-29 as 
follows: 

1 . (Amended) A method of enabling a plurality of at - loa s t * ono pervasive dovico devices to 
retrieve at least one authentication token from at least one personal authentication gateway, said 
method comprising the steps of: 

registering and authorizing the plurality of pervasive devices to be a members of a 
pervasive authentication domain by registering the plurality of pervasive devices with the 
at least one personal authentication gateway, wherein the at least one personal 
authentication gateway is integrated into one of the plurality of pervasive devices and 
comprises: 

one token server, wherein the at least one personal authentication gateway allows 
the plurality of pervasive devices access to a plurality of access controlled server 
a pplications; 

ascertaining ihe at least one personal authentication gateway from th e- at l e ast p e rvasiv e 
devtee by broadcasting a pervasive authentication domain discovery request message 
from one of the plurality of pervasive devices and receiving at least one discovery 
response message from the at least one personal authentication gateway; . 

sending at least one token request from at least one pervasive device to the at least one 
personal authentication gatewa y, the at least one pervasive device having an automatic 
token client: and, 

receiving a token response at the at least one pervasive device , wherein the token client 
translates the at least one authentication token provided bv the at least one personal 
authentication gateway for use bv a client application on the at least one pervasive 
device, fr om the at least one personal authentication gateway, 

7. (Amended) A method of enabling at least one personal authentication gateway to distribute at 
least one authentication token to at loast - ono a plurality of authorized pervasive dovioo devices, 
th e at least on e p e rsonal auth e ntication gat e way comprising at least - one - token sorvor and the at 
l e ast on e p e rvasiv e d e vic e comprising at l e ast on e automatic token client, said method 
comprising the steps of; 

registering a plurality of pervasive 4evioe devices to be a m e mb e r members of a 
pervasive authentication domain by registering the plurality of pervasive devices with a 
personal authentication gateway, wherein the personal authentication gateway is 
integrated into one of the plurality of pervasive devices and comprises one token server: 
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receiving at least one token request from at least one pervasive device that is a member of 
the personal authentication domain, wherein the at least one pervasive device comprises 
at least one automatic token client , on at least one personal authentication gateway; 

determining whether the at least one pervasive device is authorized to receive 
authentication tokens, wherein said determining step comprises; 

ascertaining ifthe at least one pervasive device has been registered as a member 
of the pervasive authentication domain of the at least one personal authentication 
gateway: 



ascertaining whether the at least one pervasive device is within a given distance of 
the at least one personal authentication gateway as measured by signal strength of 
wireless communication: and. 

sending at least one token respons e, wherein the token response comprises a token 
translatable bv the automatic token client for use by client applications on the at least one 
pervasive device, to th e at lea s t - oro the at least one pervasive device from theat least one 
personal authentication gateway. 

1 9. ( Amended) An apparatus for enabling at l e ast on e a plurality of pervasive deviee devices to 
retrieve at least one authentication token from at least one personal authentication gateway, said 
apparatus comprising: 

a discoverer which finds at least one personal authentication gateway integrated on one of 
the plurality of pervasive devices capable of responding to token requests; 

a token requestor which sends at least one r e qu e sts request for at least one token required 
by &e at least one pervasive device; 

a token responder integrated into one of a plurality of pervasive devices which accepts at 
least one token requests and sends at least one token response with at least one 
authentication token, only if the at least one pervasive device has been authorized by 
registration with the personal authentication gateway domain, to the at least one 
authorized pervasive device; and, 

a translator which translates the authentication token for use bv client applications on the 
at least one pervasive device, 

24. (Amended) An apparatus comprising means for enabling at least one personal authentication 
gateway integrated into a pervasive device to distribute authentication tokens to at least one 
authorized pervasive device, said apparatus comprising: 

means for configuring a pervasive device with the personal authentication gateway: 
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means for registering at teas* on e a plurality of pervasive devise devices for membership 
in a pervasive authentication domain; and 

means for receiving a token request from at least one pervasive device; 

means for determining whether the at least one pervasive device is authorized to receive . 
authentication tokens, said determining means comprising: 

ascertaining if the at least one pervasive device has been registered as a member 
of the pervasive authentication domain of the at least one personal authentication 
gateway: 

ascertaining whether the at least one pervasive device is within a given distance of 
the at leastone personal authentication gateway as measured by signal strength of 
wireless communication: and. 

means for sending at least one token response to said at least one pervasive device from 
at least one personal authentication gateway. 

25. (Amended) A program storage device readable by machine, tangibly embodying a program 
of instructions executable by the machine to perform method steps for enabling at l e ast on e a 
. plurality of pervasive d e vic e devices to retrieve at least one authentication, token from at least 
one personal authentication gateway, said method comprising the steps of: 

registering and authorizing the plurality of pervasive devices to be a members of a 
pervasive authentication domain bv registering the plurality of pervasive devices with the 
at least one personal authentication gateway, wherein the at least one personal 
authentication gateway is integrated into one of the plurality of pervasive devices and 
comprises: 

one token server, wherein the at least one personal authentication gateway allows 
the plurality of pervasive devices access to a plurality of access controlled server 
a pplications ; 

ascertaining the at least one personal authentication gateway from tho at least pervasiv e 
deviee bv broadcas ting a pervasive authentication domain discovery request message 
from one of the plurality of pervasive de vices and receiving at least one discovery 
response message from the at least one personal authe ntication gateway: 

sending at least one token request from at least one pervasive device to the at least one 
personal authentication gatewa y, the at least one pervasive device having an automatic 
token client : and, 

receiving a token response at the at least one pervasive device , wherein the token client 
translates the at least one authentication token provided bv the at least one personal 
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authentication gateway for use by a client application on the at least one pervasive 
device, f rom the at least one personal authentication gateway. 

26. (Amended) A program storage device readable by machine, tangibly embodying a program 
of instructions executable by the machine to perform method steps enabling at least one personal 
authentication gateway to distribute authentication tokens at least ono a plurality of pervasive 
dovioo devices, said method comprising the steps of: 

registering a plurality of pervasive dovico devices to be a member members of a 
pervasive authentication domain by registering the plurality of pervasive devices with a 
personal authentication gateway, wherein the personal authentication gateway is 
integrated into one of the plurality of pervasive devices and comprises one token server; 

receiving at least one token request from at least one pervasive device , wherein the at 
least one pervasive device comprises at least one automatic token client . on at least one 
personal authentication gateway; 

determining whether the at least one pervasive device is authorized to receive 
authentication tokens, wherein said determining step comprises: 

ascertaining if the at least one pervasive device has been registered as a member 
of the pervasive authentication domain of the at least one personal authentication 
gateway; 

ascertaining whether the at least one pervasive device as within a given distance of 
the at least one personal authentication gateway as measured bv signal strength of 
wireless communication : and, 

sending at least one token response , wherein the token response comprises a token 
translatable bv the automatic token client for use bv client applications on the requesting 
pervasive device, to the at least one pervasive device from the a t least one personal 
authentication gateway. 

27. (Amended) An article of manufacture comprising a computer usable medium having 
computer readable program code means embodied therein for causing a computer to effect a 
method of enabling at loaot ono a plurality of pervasive dovico devices to retrieve at least one 
authentication token from at least one personal authentication gateway, said method comprising 
the steps of: 

registering and authorizing the plurality of pervasive devices to be a members of a 
pervasive authentication domain bv registering the plurality of pervasive devices with the 
at least one personal authentication gateway, wherein the at least one personal 
authentication gateway is integrated into one of the plurality of pervasive devices and 
comprises: 



5 



PAGE 6/8 ■ RCVD AT 511612007 11:26:47 AM [Eastern Daylight Time]* SVR:USPTO-EFXRF-6/15 » DNIS:2738300 * CSID:412 741 9292* DURATION (mm-ss):01-34 



05-16-' 07 11:21 FROM- 



412-741-9292 



T-807 P007/008 F-096 



one token server, wherein the at least one personal authentication gateway allows 
the plurality of pervasive devices access to a plurality of access controlled server 
applications ; 

ascertaining the at least one personal authentication gateway from th e at loast pervasiv e 
devtee bv broadcasting a pervasive authentication domain discovery request message 
from one of the plurality of pervasive devices and receiving at least one discovery 
response message from the at least one personal authentication gateway; 

sending at least one token request from at least one pervasive device to the at least one 
personal authentication gatewa y, the at least one pervasive device having an automatic 
token client ; and, 

receiving a token response at the at least one pervasive devic e, wherein the token client 
translates the at least one authentication token provided bv the at le ast one personal 
authentication gateway for use by a client application on the at least one pervasive 
device, fr om the at least one personal authentication gateway. 

28. (Amended) An article of manufacture comprising a computer usable medium having 
computer readable program code means embodied therein for causing a computer to effect a 
method of enabling at least one personal authentication gateway to distribute at least one 
authentication token to at l e ast on e a plurality of pervasive d e vic e devices, said method 
comprising the steps of: 

registering a plurality of pervasive d e vic e devices to be a memb e r members of a 
pervasive authentication domain by registering the plurality of pervasive devices with a 
personal authentication gateway, wherein the personal authenticatip_n_gateway is 
integrated into one of the plurality of pervasive devices and comprises one token server ; 

receiving at least one token request from at least one pervasive devic e, wherein the at 
least one pervasive device comprises at least one automatic token client , on at least one 
personal authentication gateway; 

determining whether the at least one pervasive device is authorized to receive 
authentication tokens, wherein said determining step comprises: 

ascertaining if the at least one pervasive device has been registered as a member 
of the pervasive authentication domain of the at least one personal authentication 
gateway: 

ascertaining whether the at least one pervasive device is within a given distance of 
the at least one personal authentication gateway as measured by signal strength of 
wireless communication: and. 
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sending at least one token respons e, wherein the to ken response comprises a token 
translatable bv the automatic token client for use bv client applications on the requesting 
pervasive device, to tho at loost ono the at least one pervasive device from thg_at least one 
personal authentication gateway. 

29. (Amended) A computer program product comprising a computer usable medium having 
computer readable program code means embodied therein for causing enablement of at l e astfl gg 
a plurality of pervasive device devices to obtain authentication tokens from at least one personal 
authentication gateway, the computer readable program code means in said computer program 
product comprising computer readable program code means for causing a computer to effect an 
apparatus for enabling of at least one a plurality of pervasive deviee devices to retrieve at least 
one authentication token from at least one personal authentication gateway, said apparatus 
comprising: 

a discoverer which finds at least one personal authentication gateway integrated on one of 
the plurality of pervasive devices capable of responding to token requests; 

a token requestor which sends at least one roquoots request for at least one token required 
by the at least one pervasive device; . .. - 

a token responder integrated into one of a plurality of pervasive devices which accepts at 
least one token requests and sends at least one token response with at least one 
authentication token only if a pervasive device has been authorized bv registration with 
the personal authentication gateway domain to at least one authorized pervasive device; 
and, 

a translator which translates the authentication token for use by client applications on one 
of the pervasive device. 
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